No description
Flake lock file updates:
• Updated input 'nix-pre-commit-hooks':
'github:cachix/git-hooks.nix/3308484d1a443fc5bc92012435d79e80458fe43c?narHash=sha256-mnTbjpdqF0luOkou8ZFi2asa1N3AA2CchR/RqCNmsGE%3D' (2024-11-19)
→ 'github:cachix/git-hooks.nix/6f4e2a2112050951a314d2733a994fbab94864c6?narHash=sha256-SVQVsbafSM1dJ4fpgyBqLZ%2BLft%2BjcQuMtEL3lQWx2Sk%3D' (2024-12-04)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/6a6f5974bd2e78895e75c03f8734036d40f177f2?narHash=sha256-qsU2nHl/LEAmBY/tNZyxwzTh3ym3oyZRKthyk%2BHv3ow%3D' (2024-12-03)
→ 'github:nixos/nixpkgs/c88114f800b48eeecd1b3a6413091f01b08f3539?narHash=sha256-QcLFaG3MnQ4yKxXg7UZKsOkKrQh3iTixWOm0BWve2VE%3D' (2024-12-05)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/229da450d6f628a9444c6d39d4b2349ea53b7e44?narHash=sha256-FgJ2/ateQWwLA78ERfCUIrzaZ/X5AaCOSWLq8I2hfCw%3D' (2024-12-03)
→ 'github:NixOS/nixpkgs/9894aea69bfd7e4f04ce35fded6f2ec9d2d9a1a2?narHash=sha256-zm8HdU5Hm7yhAxQrvV2VNUBLbHM4X1deInfCfAE58rA%3D' (2024-12-05)
• Updated input 'nur':
'github:nix-community/NUR/0c7ae4a63afbc6c305e401a06191380027f5ec73?narHash=sha256-Uem1KaDdvbHcTxii4t1fuuFsJlC7WeEjmXH%2Bi1ElR/I%3D' (2024-12-03)
→ 'github:nix-community/NUR/e6098b0360b6436634f3604c134e99b608a8c252?narHash=sha256-AEBmhobRo6PcvaZn9oEfjsQ/NElKBIBj8Va7sivSyzw%3D' (2024-12-05)
|
||
|---|---|---|
| .git-crypt | ||
| custom-utils | ||
| hosts | ||
| modules | ||
| pkgs | ||
| users | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
jalr's NixOS Configuration
Install a new host
This installs nixos on host somehost:
NixOS Anywhere
nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>
The traditional way
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5
Debugging boot issues
- Add
rd.systemd.debug_shellkernel parameter - Press CTRL+ALT+F9 to switch to root shell